SAFETY MANUAL - Tuv-fs.com
SAFETY MANUAL - Tuv-fs.com SAFETY MANUAL - Tuv-fs.com
SAFETY MANUAL In addition to Normal Updates, Intelligent Updates are supported in release 3.4 and above. Both on-line update features enable the user to modify the application while the process is running. While both types of on-line updates perform essentially the same function, Intelligent Updates allow the application to be modified in a number of ways that Normal Updates would not allow. If Intelligent Updates are to used they must be explicitly enabled for each project, and the Intelligent Update Manager must have knowledge of the specific version of the application that is currently running in the controller. Each time an application is compiled, the Intelligent Update Manager uses it’s knowledge of the application running in the controller to create an Intelligent Update recipe. This recipe contains a signature of the application running in the target, and information on how to perform specific mapping for variables and function block instance data. It is the recipe that allows the value of variables and function block instance data to be preserved across an on-line update. The Intelligent Update Enhancement section of 8082B Product Description (PD) must be read and understood before Intelligent Update is used. Where it is necessary to perform on-line modifications, caution shall be taken to ensure that unsafe responses are not generated. Particular consideration shall be given to the effects during the transition between the existing and the new programs and configurations. This is particularly important where a number of interacting systems provide the required safety functions. Before any revised application program is downloaded to an on-line system: • All changes shall be tested using the application simulator • The cross-reference checkers (see para. 3.11.6.1) shall be used and programs using data from modified programs shall be re-tested. • The source code compare utility (see para. 3.11.6.2) shall be used; any programs identified as having other than compiled variable addresses shall be re-tested. Once testing has been successfully completed, the application program may be downloaded to the TMR Processor. The download and application update may only be performed with the TMR Processor keyswitch in the ‘Maintain’ position. 3.12.2 System Configuration All modifications to the system configuration (system.ini file) shall be subject to the same considerations as specified earlier in this Manual. The configuration file may be up- or downloaded to the system when the TMR Processor keyswitch is in the Maintain position. High Density I/O configuration changes then require that the application program be stopped and re-started to bring the changes on-line. Modification to the system configuration normally entails the addition or deletion of input and output points. If these points previously did not exist within the application program, it will be necessary to take the system off-line to perform the changes. Basic system parameters, including the number of chassis, chassis mapping, communications settings etc., require that the TMR Processor be removed and reinstalled, or the power cycled to the controller chassis to implement the configuration changes. Where changes to the system configuration are anticipated it is necessary to include the “spare” module positions and chassis within the existing system.ini file. 3.13 ENVIRONMENTAL REQUIREMENTS Doc No P8094 Page 66 of 67 Issue 14 September 2003
SAFETY MANUAL The system installation environment presents a potential source of common cause failure. It is necessary to ensure that the equipment is suitable for the intended environment. Alternatively, methods of maintaining the equipment’s environmental conditions within its capabilities should be provided. This is applicable to all systems; the remainder of this section however gives the specific environmental recommendations for a TMR system. 3.13.1 Climatic Conditions The recommended and maximum climatic conditions for the equipment are shown in the Table 8. These conditions apply for representative and typical system configurations. Where high equipment densities are accommodated within a system or large quantities of high-power equipment are closely packed, it is necessary to consider the localised heat generation and its impact on the overall system operating environmental conditions. Table 8 defines the climatic conditions for a system as a whole. It is possible to achieve a system capable of operation in a wider range of climatic conditions using detailed analysis of the characteristics of the system and resultant conditions for the equipment mounted within the system. It should be noted that the operating temperature for the equipment within any electronic system has a significant impact on the potential operating life of that equipment. High operating temperature and rates of temperature change significantly reduce the operational life of any electronic device; therefore, measures should be taken to ensuring that the operating environment remains within the recommended range. Similarly, it is highly recommended that the periods that the equipment is exposed to conditions outside the recommended range be minimised. Parameter Comment Recommen ded Limit Operating Temperature (dry) With natural cooling Min Max Min Max 10 C 30 C 0 C 40 C 50°F 86°F 32°F 104°F Storage Temperature (dry) With forced airflow 10°C 30°C -20°C 50°C 50°F 86°F -4°F 122°F 10 C 30 C -25 C 70 C 50°F 86°F -13°F 158°F Operating Humidity Noncondensing 5%RH 95%RH Storage Humidity Noncondensing 5%RH 95%RH Temperature change 0.5 C/min See Note Doc Number P8094 Issue 14 September 2003 Page 67 of 67
- Page 18 and 19: SAFETY MANUAL 8000 Series Certified
- Page 20 and 21: SAFETY MANUAL 3.11.6 Program Testin
- Page 22 and 23: SAFETY MANUAL 1. INTRODUCTION 1.1 P
- Page 24 and 25: SAFETY MANUAL 1.3.1 Safety and Func
- Page 26 and 27: SAFETY MANUAL The additional elemen
- Page 28 and 29: SAFETY MANUAL The TMR architecture
- Page 30 and 31: SAFETY MANUAL 2.2.1 Safety Lifecycl
- Page 32 and 33: SAFETY MANUAL Tools used within the
- Page 34 and 35: SAFETY MANUAL 2.2.1.9 Safety System
- Page 36 and 37: SAFETY MANUAL • Method of detecti
- Page 38 and 39: SAFETY MANUAL 2.3.1 Competency The
- Page 40 and 41: SAFETY MANUAL 3.2.1 Safety-Related
- Page 42 and 43: SAFETY MANUAL Pulse Generator 8444,
- Page 44 and 45: SAFETY MANUAL 3.2.2 High-Density I/
- Page 46 and 47: SAFETY MANUAL 3.2.3 Analog Input Sa
- Page 48 and 49: SAFETY MANUAL 3.2.7 NFPA 86 Require
- Page 50 and 51: SAFETY MANUAL shall be provided for
- Page 52 and 53: SAFETY MANUAL 3.4 ACTUATOR CONFIGUR
- Page 54 and 55: SAFETY MANUAL 3.6.1.2 Composite Sca
- Page 56 and 57: SAFETY MANUAL Power Fail Timeout (P
- Page 58 and 59: SAFETY MANUAL • Access to the wor
- Page 60 and 61: SAFETY MANUAL 3.11.1 IEC1131 Workbe
- Page 62 and 63: SAFETY MANUAL 3.11.3 Testing of New
- Page 64 and 65: SAFETY MANUAL 3.11.4 Application De
- Page 66 and 67: SAFETY MANUAL Where the interaction
- Page 70 and 71: SAFETY MANUAL 1ºF/min Table 8 - Cl
- Page 72 and 73: SAFETY MANUAL 2. Alternatively, the
- Page 74 and 75: SAFETY MANUAL 4. CHECKLISTS This se
- Page 76 and 77: SAFETY MANUAL Description Reference
- Page 78 and 79: SAFETY MANUAL Description Reference
- Page 80 and 81: SAFETY MANUAL 4.2.4 High Density Mo
- Page 82 and 83: SAFETY MANUAL 5. PREVIOUSLY ASSESSE
<strong>SAFETY</strong> <strong>MANUAL</strong><br />
The system installation environment presents a potential source of <strong>com</strong>mon cause<br />
failure. It is necessary to ensure that the equipment is suitable for the<br />
intended environment. Alternatively, methods of maintaining the<br />
equipment’s environmental conditions within its capabilities should be<br />
provided. This is applicable to all systems; the remainder of this section<br />
however gives the specific environmental re<strong>com</strong>mendations for a TMR<br />
system.<br />
3.13.1 Climatic Conditions<br />
The re<strong>com</strong>mended and maximum climatic conditions for the equipment are shown<br />
in the Table 8. These conditions apply for representative and typical system<br />
configurations. Where high equipment densities are ac<strong>com</strong>modated within a<br />
system or large quantities of high-power equipment are closely packed, it is<br />
necessary to consider the localised heat generation and its impact on the overall<br />
system operating environmental conditions.<br />
Table 8 defines the climatic conditions for a system as a whole. It is possible to<br />
achieve a system capable of operation in a wider range of climatic conditions using<br />
detailed analysis of the characteristics of the system and resultant conditions for the<br />
equipment mounted within the system.<br />
It should be noted that the operating temperature for the equipment within any<br />
electronic system has a significant impact on the potential operating life of that<br />
equipment. High operating temperature and rates of temperature change<br />
significantly reduce the operational life of any electronic device; therefore,<br />
measures should be taken to ensuring that the operating environment remains<br />
within the re<strong>com</strong>mended range. Similarly, it is highly re<strong>com</strong>mended that the<br />
periods that the equipment is exposed to conditions outside the re<strong>com</strong>mended<br />
range be minimised.<br />
Parameter<br />
Comment<br />
Re<strong>com</strong>men<br />
ded<br />
Limit<br />
Operating<br />
Temperature<br />
(dry)<br />
With natural<br />
cooling<br />
Min Max Min Max<br />
10 C 30 C 0 C 40 C<br />
50°F 86°F 32°F 104°F<br />
Storage Temperature<br />
(dry)<br />
With forced<br />
airflow<br />
10°C 30°C -20°C 50°C<br />
50°F 86°F -4°F 122°F<br />
10 C 30 C -25 C 70 C<br />
50°F 86°F -13°F 158°F<br />
Operating Humidity<br />
Noncondensing<br />
5%RH<br />
95%RH<br />
Storage Humidity<br />
Noncondensing<br />
5%RH<br />
95%RH<br />
Temperature change 0.5 C/min See<br />
Note<br />
Doc Number P8094<br />
Issue 14 September 2003 Page 67 of 67